[Snyk] Fix for 2 vulnerabilities

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix 2 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

``` Failed to update the yarn.lock, please update manually before merging. ```

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ASYNC-7414156	631
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	631

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell	+161	46.8 MB	ethworks
npm/[email protected]	environment, filesystem, network, shell Transitive: unsafe	+1	4.12 MB	alcuadrado

🚮 Removed packages: npm/@ethersproject/[email protected], npm/@ethersproject/[email protected], npm/@ethersproject/[email protected], npm/@ethersproject/[email protected], npm/@nodelib/[email protected], npm/@nodelib/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Trivial Package	npm/[email protected]	Location: Package overview	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 9/6/2016, 9:11:09 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 1/31/2018, 9:46:35 AM	orphan: npm/[email protected]	🚫
Filesystem access	npm/[email protected]	Module: fs Location: Package overview	orphan: npm/[email protected]	🚫
Deprecated	npm/[email protected]	Reason: request has been deprecated, see https://github.com/Request’s Past, Present and Future request/request#3142	orphan: npm/[email protected]	🚫
Filesystem access	npm/[email protected]	Module: fs Location: Package overview	orphan: npm/[email protected]	🚫
Network access	npm/[email protected]	Module: http Location: Package overview	orphan: npm/[email protected]	🚫
Network access	npm/[email protected]	Module: https Location: Package overview	orphan: npm/[email protected]	🚫
Network access	npm/[email protected]	Module: http-signature Location: Package overview	orphan: npm/[email protected]	🚫
Environment variable access	npm/[email protected]	Env Vars: NODE_DEBUG Location: Package overview	orphan: npm/[email protected]	🚫
New author	npm/[email protected]	New Author: vweevers Previous Author: ralphtheninja	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 7/22/2014, 6:50:49 AM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 8/2/2018, 6:03:51 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 2/19/2017, 2:28:49 PM	orphan: npm/[email protected]	🚫
New author	npm/[email protected]	New Author: doowb Previous Author: jonschlinkert	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 6/27/2018, 1:02:41 PM	package.json	🚫
New author	npm/[email protected]	New Author: phated Previous Author: jonschlinkert	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 8/19/2017, 2:34:34 AM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 2/20/2018, 2:31:14 AM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 10/23/2016, 4:54:00 PM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 4/20/2017, 4:43:13 AM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 5/10/2016, 10:51:16 AM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 6/19/2019, 8:34:39 PM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 1/16/2017, 3:35:15 PM	orphan: npm/[email protected]	🚫
Dynamic require	npm/[email protected]	Location: Package overview	orphan: npm/[email protected]	🚫
Trivial Package	npm/[email protected]	Location: Package overview	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 6/24/2019, 8:33:47 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 4/9/2017, 9:43:35 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 5/30/2017, 4:25:21 AM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 11/8/2018, 11:18:38 AM	orphan: npm/[email protected]	🚫
Environment variable access	npm/[email protected]	Env Vars: Location: Package overview	orphan: npm/[email protected]	🚫
Deprecated	npm/[email protected]	Reason: https://github.com/lydell/resolve-url#deprecated	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 2/25/2014, 6:48:50 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 6/25/2017, 11:48:15 AM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 11/8/2018, 11:14:15 AM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 1/5/2016, 3:03:55 AM	package.json	🚫
Environment variable access	npm/[email protected]	Env Vars: npm_package_name Location: Package overview	package.json	🚫
Environment variable access	npm/[email protected]	Env Vars: npm_lifecycle_script Location: Package overview	package.json	🚫
Environment variable access	npm/[email protected]	Env Vars: TEST_PSEUDOMAP Location: Package overview	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 2/19/2019, 1:48:39 PM	package.json	🚫
Environment variable access	npm/[email protected]	Env Vars: Location: Package overview	orphan: npm/[email protected]	🚫
Environment variable access	npm/[email protected]	Env Vars: Location: Package overview	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 7/10/2018, 11:09:45 AM	orphan: npm/[email protected]	🚫
Environment variable access	npm/[email protected]	Env Vars: Location: Package overview	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 9/21/2016, 10:55:58 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 10/1/2018, 7:47:16 PM	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 2/16/2018, 1:03:56 PM	orphan: npm/[email protected]	🚫
New author	npm/[email protected]	New Author: cwmma Previous Author: fanatid	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 10/2/2018, 1:35:56 PM	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 9/27/2017, 10:09:20 PM	package.json	🚫
Uses eval	npm/[email protected]	Eval Type: Function Location: Package overview	orphan: npm/[email protected]	🚫
Network access	npm/[email protected]	Module: http-errors Location: Package overview	orphan: npm/[email protected]	🚫
CVE	npm/[email protected]	CVE: GHSA-f8q6-p94x-37v3 minimatch ReDoS vulnerability (HIGH) Affected versions: < 3.0.5 Patched version: 3.0.5	orphan: npm/[email protected]	🚫
Critical CVE	npm/[email protected]	CVE: GHSA-xvch-5gv4-984h Prototype Pollution in minimist (CRITICAL) Affected versions: >= 1.0.0, < 1.2.6 Patched version: 1.2.6	package.json	🚫
Unmaintained	npm/[email protected]	Last Publish: 5/1/2017, 9:02:36 PM	orphan: npm/[email protected]	🚫
Non-existent author	npm/[email protected]	Location: Package overview	orphan: npm/[email protected]	🚫
Deprecated	npm/[email protected]	Reason: This package is broken and no longer maintained. 'mkdirp' itself supports promises now, please switch to that.	orphan: npm/[email protected]	🚫
Trivial Package	npm/[email protected]	Location: Package overview	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 1/31/2017, 6:58:24 PM	orphan: npm/[email protected]	🚫
Floating dependency	npm/[email protected]	Location: Package overview	orphan: npm/[email protected]	🚫
Deprecated	npm/[email protected]	Reason: This module has been superseded by the multiformats module	orphan: npm/[email protected]	🚫
New author	npm/[email protected]	New Author: hugomrdias Previous Author: olizilla	orphan: npm/[email protected]	🚫
Deprecated	npm/[email protected]	Reason: This module has been superseded by the multiformats module	orphan: npm/[email protected]	🚫
Unmaintained	npm/[email protected]	Last Publish: 12/20/2016, 2:27:28 AM	orphan: npm/[email protected]	🚫
CVE	npm/[email protected]	CVE: GHSA-hrpp-h998-j3pp qs vulnerable to Prototype Pollut

[openzeppelin-code]

[Snyk] Fix for 2 vulnerabilities

Generated at commit: 46384b9e4819dabe7436605c50b372ce0daeec62

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	1 1 0 4 17 23
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector